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1  Summary  of  goals 

The  goal  of  the  research  supported  by  the  grant  DAAG-55-98-1-0309  from  ARO  was  to 
increase  the  ability  of  the  Concurrency  Workbench,  a  tool  for  specifying  and  reasoning  about 
reactive  systems,  to  deal  with  programs,  and  not  just  design  notations.  With  this  goal  in 
mind  we  considered  the  following  two  main  problems: 

•  Is  it  possible  to  build  an  interface  to  the  Concurrency  Workbench  such  that  it  accepts 
C  programs  as  inputs?  The  motivation  f6r  considering  this  problem  is  so  that  the  reach 
of  model-checking  and  simulation  relations  checking  can  be  extended  from  finite  state 
designs  to  programs. 

•  Can  the  Concurrency  Workbench  be  extended  to  handle  design  notations  that  have 
probabilistic  components  in  them? 

Furthermore,  given  that  we  wish  to  extend  model-checking  type  techniques  to  programs, 
we  also  considered  the  problem  of  simulating  concurrent  programs. 

2  Summary  of  Important  Results 

The  important  results  achieved  during  the  project  are  as  follows: 

1.  C2CCS  -  a  system  to  abstract  C  programs  based  On  user  input  has  been  constructed. 
This  system,  which  borrows  ideas  from  work  on  Compilers  and  data  flow  analysis, 
allows  an  user  to  input  a  C  program  and  instructions  on  what  aspects  should  be  ab¬ 
stracted,  and  how.  For  instance,  the  user  could  specify  that  the  only  meaningful  value 
of  a  program  variable  are  whether  it  is  positive  or  negative.  With  such  specifications 
about  all  variables  in  a  program  the  C2CCS  converter  can  build  a  finite  state  model 
of  the  program  that  is  being  analyzed.  The  output  of  the  converter  is  a  specification 
in  CCS  that  can  be  input  to  the  Concurrency  workbench,  which  can  then  be  reasoned 
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about.  As  of  the  writing  of  the  report  the  tool  is  almost  done,  and  is  being  tested 
on  protocol  specifications  such  as  the  i-Protocol.  The  principal  implementor,  Dan 
Du  Varney,  is  also  currently  finishing  up  his  dissertation  and  will  defend  it  very  soon. 

2.  One  of  the  main  strengths  of  Process  Algebras,  and  its  implementation  in  the  Con¬ 
currency  Workbench,  is  compositionality,  i.e.,  the  ability  to  reason  about  a  system 
by  reasoning  about  its  subsystems.  In  the  presence  of  probabilistic  information,  such 
as  the  error  rate  of  communication  medium,  properties  can  not  be  established  with 
certainty  but  with  certain  probability.  We  have  designed  enriched  version  of  the  spec¬ 
ification  language  used  in  the  Concurrency  Workbench  and  an  enriched  version  of 
mu-calculus,  the  requirements  language  used  in  the  workbench.  This  work  is  ongoing 
and  is  supported  by  a  new  grant  from  ARC. 

3.  With  colleagues  from  Prance,  the  PI  investigated  how  abstractions  can  be  used  for 
simulating  programs.  While  simulations  can  be  used  to  find  the  presence  of  bugs  and 
not  the  absence  of  bugs,  it  forms  a  major  component  in  any  program  development 
environment.  To  extend  the  reach  of  our  techniques  we  investigated  how  symbolic 
representations  could  be  used  to  drive  the  simulation  faster,  and  get  it  to  cover  larger 
parts  of  a  program’s  execution.  The  main  result  is  that  a  class  of  regular  expressions 
can  be  effectively  used  in  computing  the  interactions  among  a  set  of  processes  that  use 
buffered  communication,  as  in  network  protocols. 
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